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(54) State management of server-side control objects 


(57) The state of one or more server-side control ob- 
jects is managed using a transportable state structure 
that is communicated between a web server and a cli- 
ent. The transportable state structure may include state 
information, hierarchical information, and an integrity 
code. The state information is related to properties of 
the server-side control objects. The hierarchical infor- 
mation is used by the server to locate an appropriate 
server-side control object in the hierarchy into which as- 
sociated state information is to be loaded. The integrity 


code allows the server to determine whether the trans- 
portable state structure was corrupted during the round- 
trip between the server and the client. Prior to a re- 
sponse to the client, the state information of one or more 
server-side control objects is recorded into the trans- 
portable state structure for transmission to the client in 
the response. The transportable state structure is then 
returned to the server and loaded into the server-side 
control objects to restore the hierarchy to its previous 
state. 
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Description 
Technical Field 

5 [0001] The invention relates generally to a web server framework, and more particularly to managing the state of 
server-side control objects that process client-side user interface elements of a web page. 

Background of the Invention 

w [0002] A typical web browser receives data from a web server that defines the appearance and rudimentary behavior 
of a web page for display on a client system. In a typical scenario, a user specifies a Uniform Resource Locator ("URL"), 
which is a global address of a resource on the World Wide Web, to access a desired web site. Generally, the term 
"resource" refers to data or routines that can be accessed by a program. An example URL is "http: //www. microsoft, 
com/ms.htm". The first part of the example URL indicates a given protocol (i.e., "http") to be used in the communication. 

15 The second part specifies the domain name (i.e., "www.microsoft.com") where the resource is located. The third part 
specifies the resource (i.e., a file called "ms.htm") within the domain. Accordingly, a browser generates an HTTP (Hy- 
perText Transport Protocol) request associated with the example URL to retrieve the data associated with ms.htm file 
within the www.microsoft.com domain. A web server hosting the www.microsoft.com site receives the HTTP request 
and returns the requested web page or resource in an HTTP response to the client system for display in the browser. 

20 [0003] The "ms.htm" file of the example above includes static HTML (HyperText Markup Language) code. HTML is 
a plain-text authoring language used to create documents (e.g., web pages) on the World Wide Web. As such, an 
HTML file can be retrieved from a web server and displayed as a web page in a browser. Using HTML, a developer 
can, for example, specify formatted text, lists, forms, tables, hypertext links, inline images and sounds, and background 
graphics for display in the browser to present the rich graphical experience that users have come to expect while 

25 viewing information from the Internet. An HTML file, however, is a static file that does not inherently support dynamic 
generation of web page content. 

[0004] If dynamic content is to be displayed, such as a change stock price or traffic information, a server-side appli- 
cation program is generally developed to handle the more complex client-server interaction. The server-side application 
program processes an HTTP request and generates the appropriate HTML code for transmission to the client in an 

30 HTTP response. An exemplary HTTP request may include parameters, such as data in a query string or data from 
web-based forms. As such, a server-side application program can process the parameters and dynamically generate 
HTML code in an HTTP response to the client. An exemplary server-side application program may dynamically generate 
documents containing appropriate HTML code using a sequence of one or more formatted text write operations to a 
memory structure. Thereafter, the resulting document is transmitted to a client system in an HTTP response, where it 

35 js displayed as a web page in the browser. 

[0005] Developing a server-side application program can be a complex task requiring not only familiarity with normal 
HTML coding that is used to layout a web page, but also with programming basics, including one or more programming 
languages, (e.g., C++, Perl, Visual Basic, or Jscript). Web page designers, on the other hand, are frequently graphics 
designers and editors, who may lack programming experience. Furthermore, simplifying complex web page develop- 

40 ment can speed the development of new web content by any developer. Generally, development of a custom server- 
side application program also requires tremendous effort, so much, in fact, that developers are often disinclined to 
attempt it. It is desirable, therefore, to provide a development framework that allows a developer to dynamically create 
and process a web page with minimal programming. 

[0006] One approach to minimize the programming requirements of dynamic web page generation has been the 
45 Active Server Page (ASP) framework, provided by Microsoft Corporation. An ASP resource typically includes Visual 
Basic or Jscript code, for example, to process an HTTP request that specifies the ASP resource as the desired resource 
and, thereafter, to generate the resulting HTML code in a HTTP response to the client. Furthermore, an ASP resource 
may reference pre-developed or third party client-side library components (e.g., client-side "ACTIVEX" controls) instead 
of requiring that the page developer write all components from scratch. However, in the current server-side application 
so frameworks, the programming required to dynamically manage client-side user interface elements (e.g., text boxes, 
list boxes, buttons, hypertext links, images, sounds, etc.) within server-side applications can still require sophisticated 
programming skills and considerable effort. An unanswered problem exists in property encapsulating programming 
required to process user interface elements, so as to allow the web page developer to focus on other aspects of the 
web page.. 

55 [0007] Server-side processing of client-side user interface elements, however, may involve complex state manage- 
ment issues, which would typically fall to the server-side applications program. The state of a server-side processing 
module corresponding to the client-side user interface element represents the server-side module's properties and 
configuration. A stateless client/server model, however, dictates that communications between client and server the 
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server does not maintain the state of processes occurring between the client and the server, because the communi- 
cations connection between the client and server may disappear unexpectedly. 

Summary of the Invention 

5 

[0008] In accordance with the present invention, the above and other problems are solved by providing encapsulated 
state management for server-side processing of client-side user interface elements in which the server does not main- 
tain the state between requests. The operation of processing the client-side user interface element may include a state 
management operation, which relates to the state (i.e., the "viewstate") of one or more server-side control objects in 
fo a control object hierarchy. A server-side control object processes and generates a client-side user interface element 
for display on a web page. A hierarchy of server-side control objects may also cooperate to generate the resulting 
authoring language code, such as standard HTML, for display of a web page on a client. The client can be, for example, 
any browser that supports standard HTML or another authoring language. 

[0009] To satisfy the stateless client/server model, state information of server-side control objects may be transported 
1 5 between the client and the server in a transportable state structure, rather than remaining on the server between HTTP 
requests. When the server receives an HTTP request from the client, the server extracts the state information from a 
transportable state structure from the HTTP request and distributes the state information to the appropriate individual 
control objects in the server-side hierarchy. The integrity of the transportable state structure may also be verified using 
a coded structure associated with the transportable state structure and generated from the state information. 
20 [0010] A method for managing a state of a server-side control object corresponding to a client-side user interface 
element incorporated in a web page displayed on a client is provided. The server-side control object is created in the 
control object hierarchy to process the client-side user interface element. A transportable state structure is received 
from the client. The transportable state structure includes state information indicating a state value for at least one 
server-side control object in the control object hierarchy. The state information is extracted from the transportable state 
25 structure. The state value from the state information is loaded into property of the server-side control object, if the state 
value is associated with the server-side control object. 

[0011] A computer program product for managing a state of a plurality of server-side control objects created in a 
control object hierarchy and corresponding to a plurality of client-side user interface elements incorporated in a web 
page displayed on a client is provided. A transportable state structure is received from the client includes state infor- 

30 mation associated with one or more server-side control objects in the control object hierarchy. The state information 
is serialized to extract a state value, an associated property data type, and hierarchical information for a property of a 
server-side control object. The server-side control object is located within the control object hierarchy based on the 
hierarchical information. The state value is loaded into the property of the server-side control object. 
[001 2] An article of manufacture is provided as a computer program product. An embodiment of a computer program 

35 product in accordance with the present invention includes a computer program storage medium readable by a computer 
system and encoding a computer program for executing a computer process managing a state of a server-side control 
object corresponding to a client-side user interface element incorporated in a web page displayed on a client. An 
alternative embodiment of a computer program product in accordance with the present invention includes a computer 
data signal embodied in a carrier wave by a computing system and encoding a computer program managing a state 

to of a server-side control object corresponding to a client-side user interface element incorporated in a web page dis- 
played on a client. A product generated by a process of the present invention is provided as authoring language code, 
containing a transportable state structure, transmitted to a client and interpreted by a browser on the client. 

Brief Description of the Drawings 

45 

[0013] FIG. 1 illustrates a web server for dynamically generating web page content for display on a client in an 
embodiment of the present invention, 

[0014] FIG. 2 illustrates a flow diagram of operations for processing and rendering client-side user interface elements 
using server-side control objects in an embodiment of the present invention. 
50 [0015] FIG. 3 illustrates exemplary modules in a web server used in an embodiment of the present invention. 
[0016] FIG. 4 illustrates an exemplary system useful for implementing an embodiment of the present invention. 
[0017] FIG. 5 illustrates a process flow diagram representing processing of a page object in an embodiment of the 
present invention. 

[0018] FIG. 6 illustrates an exemplary portion of a dynamic content file (e.g., an ASP+ resource) in an embodiment 
55 of the present invention. 

[0019] FIG. 7 illustrates resultant code generated by one or more server side control objects in response to the 
exemplary portion of the dynamic content file of FIG. 6. 

[0020] FIG. 8 illustrates the control object hierarchy corresponding to the ASP+ resource of FIG. 6 and the 
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_VIEWSTATE field value of FIG. 7. 

[0021] FIG. 9 illustrates a nested version of the _VIEWSTATE field value of FIG. 7. 

[0022] FIG. 10 illustrates a process flow diagram for receiving a transportable state structure and loading state in- 
formation stored therein into control objects of a control object hierarchy in an embodiment of the present invention. 
5 [0023] FIG. 1 1 illustrates a process flow diagram for saving state information from control objects of a control object 
hierarchy into a transportable state structure for transmission to the client in an embodiment of the present invention. 

Detailed Description of the Invention 

10 [0024] In an embodiment of the present invention, web page content is dynamically generated on a web server for 
display on a client. The client and the web server communicate across a network, for example, using HTTP requests 
and HTTP responses. As such, the web server generates web page content, which may be in the form of HTML code, 
and transmits the content to the client, which can display the web page in a browser. Server-side control objects, which 
logically correspond to individual user interface elements of the web page, are created on the web server to process 

15 and generate the web page content to be used by a client-side browser to display and process a web page. The server- 
side control objects are declared in a dynamic content file, such as an ASP+ resource, which is processed by a page 
factory to create a hierarchy of server-side control objects. The control objects in the hierarchy cooperate to process 
the request received from the client and then generate resulting web page content for transmission to the client, before 
the control objects in the hierarchy are terminated. 

20 [0025] A page object may be instantiated as the top level of the control object hierarchy in an embodiment of the 
present invention. A page object, which is also a control object, typically contains one or more child control objects, 
and each child control object can contain one or more child control objects of its own to extend into a hierarchy of 
multiple levels. The page objects and descendent control objects execute a sequence of operations to process and 
generate the web content that corresponds to client-side user interface elements. 

25 [0026] One of the operations in this sequence includes a load operation that deserializes the state information , which 
is received in a transportable state structure included in the request from the client, into the appropriate control object 
or objects in the hierarchy. A traversal operation of this load operation may walk through the control object hierarchy, 
following hierarchical information in the transportable state structure, to locate appropriate control objects in the hier- 
archy. In an embodiment of the present invention, the received state information includes only the states of control 

30 objects that have changed from their initial states (i.e., the state information includes only differential data). Alternative 
embodiments may include all states of all control objects in the hierarchy, whether changed or not, or some other 
combination of state information and hierarchical information for one or more server-side control objects. 
[0027] Another operation of the sequence includes a save operation that serializes the state information from control 
objects having changed states. The state information is added to a transportable state structure for transmission to 

35 the client. The client may return the transportable state structure to the web server on a subsequent request to the 
web server. Upon receipt of the transportable state structure, the control object hierarchy is recreated and the load 
operation restores the hierarchy's state to that of the previous response. 

[0028] In an alternative embodiment, the transportable state structure may not be transmitted to the client. Instead, 
the transportable state structure may remain in the server or be transferred to another resource location (e.g., another 
40 server). For example, in the case of load balancing, a first server may communicate with a browser in a first HTTP 
transaction, but a second server may communicate with the browser in a second HTTP transaction. Accordingly, the 
transportable state structure can be communicated from the first server to the second server to process the second 
HTTP transaction, thereby bypassing the client. 

[0029] FIG. 1 illustrates a web server for dynamically generating web page content for display on a client in an 
45 embodiment of the present invention. A client 100 executes a browser 102 that displays a web page 104 on a display 
device of the client 1 00. The client 1 00 may include a client computer system having a display device, such as a video 
monitor. An "INTERNET EXPLORER" browser, marketed by Microsoft Corporation, is an example of a browser 102 in 
an embodiment of the present invention. Other exemplary browsers include without limitation "NETSCAPE NAVIGA- 
TOR" and "MOSAIC". The exemplary web page 104 incorporates a text box control 106 and two button controls 108 
50 and 1 1 0. The browser 1 02 may receive HTML code in the HTTP response 1 1 2 from a web server 1 1 6 and displays the 
web page as described by the HTML code. Although HTML is described with reference to one embodiment, other 
authoring languages, including without limitation SGML (Standard Generalized Markup Language), XML (extensible 
Markup Language), and WML (Wireless Markup Language), which is an XML-based markup language, designed for 
specifying the content and user interfaces of narrowband wireless devices, such as pagers and cellular phones, are 
55 contemplated within the scope of the present invention. Furthermore, although standard HTML 3.2 is primarily disclosed 
herein, any version of HTML is supportable within the scope of the present invention. 

[0030] The communications between the client 100 and the web server 116 may be conducted using a sequence of 
HTTP requests 114 and HTTP responses 112. Although HTTP is described with reference to one embodiment, other 
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following operations: Postback event handling, postback data handling, state management, and data binding. Postback 
events and data (collectively "postback input") from user interface elements are communicated from the client to the 
server for processing. A postback event, for example, may include without limitation a "mouse click" event from a client- 
side button element or a "data change" event from a client-side textbox element that is communicated to the server. 
5 Postback data, for example, may include without limitation text entered by a user in a text box element or an index of 
an item selected from a drop-down box. 

[0038] Operation 209 saves the property values, associated type information, and hierarchical information into a 
transportable state structure for transmission to the client. In operation 208, each server-side control object in the 
hierarchy is called to generate (or render) authoring language data, such as HTML code, for display of client-side user 

10 interface elements in the web page. Note that, although the term "render" may be used to described the operation of 
displaying graphics on a user interface, the "render" is also used herein to describe the operation of generating authoring 
language data that can be interpreted by a client application, such as a browser, for display and client-side functionality. 
Rendering operation 208 also generates the authoring language data representing the transportable state structure. 
A more detailed discussion of the processing operation 206 and the rendering operation 208 is provided in association 

15 with FIG. 6. In a one embodiment, calls to render() methods in individual control objects are performed using a tree 
traversal sequence. That is, a call to the render() method of a page object results in recursive traversal throughout 
appropriate server-side control objects in the hierarchy. Alternative methods for calling the renderQ methods for ap- 
propriate control objets may also be employed, including an event signaling or object registration approach. The pa- 
rentheses designate the "render()" label as indicating a method, as compared to a data value. 

20 [0039] In an embodiment of the present invention, the actual creation of the individual server-side control objects 
may be deferred until the server-side control object is accessed (such as when handling postback input, loading a 
state, rendering HTML code from the control object, etc.) in operations 206 or 208. If a server-side control object is 
never accessed for a given request, deferred control object creation optimizes server processing by eliminating an 
unnecessary object creation operation. 

25 [0040] Operation 210 transmits the authoring language data (e.g., HTML code), including the transportable state 
structure, to the client in an HTTP response. In operation 214, the client receives the HTML code, including the trans- 
portable state structure, associated with the web page to be displayed. The transportable state structure may be stored 
at the client for return to the server in a subsequent HTTP request. In operation 216, the client system incorporates 
(e.g., displays) the user interface elements of the new page in accordance with the HTML code received from the HTTP 

30 response. It should be understood, however, that incorporation of a user-interface element may include non-display 
operations, such as providing audio or tactile output, reading and writing to memory, controlling the operation of scripts, 
etc. In operation 212, the server-side control object hierarchy is terminated. In an embodiment of the present invention, 
server-side control objects in the hierarchy are created in response to an HTTP request referencing an associated 
ASP+ resource, and destroyed subsequent to the rendering of authoring language data (e.g., HTML data). In an al- 

35 ternative embodiment, operation 212 may be performed after operation 208 and before operation 210. 

[0041] FIG. 3 illustrates exemplary modules in a web server used in an embodiment of the present invention. The 
web server 300 receives an HTTP request 302 into the HTTP pipeline 304. The HTTP pipeline 304 may include various 
modules, such as modules for logging of web page statistics, user authentication, user authorization, and output caching 
of web pages. Each incoming HTTP request 302 received by the web server 300 is ultimately processed by a specific 

to instance of an IHTTPHandler class (shown as handler 306). The IHTTP prefix indicates that the class is an Interface 
of an HTTP handler. The handler 306 resolves the URL request and invokes an appropriate handler factory (e.g., a 
page factory module 308). 

[0042] In FIG. 3, a page factory module 308 associated with the ASP+ resource 31 0 is invoked to handle the instan- 
tiation and configuration of the objects declared in the ASP+ resource 310. In one embodiment, an ASP+ resource 

45 can be identified or referenced by designating a particular suffix (or file extension such as ".aspx") with a file. When a 
request for a given ".aspx" resource is first received by the page factory module 308, the page factory module 308 
searches the file system for the appropriate file (e.g., the .aspx file 310). The file may contain text (e.g., authoring 
language data) or data in another format (e.g., bytecode data or encoded data) that may later be interpreted or accessed 
by the server to service the request. If the physical file exists, the page factory module 308 opens the file and reads 

50 the file into memory. If the file cannot be found, the page factory module 308 returns an appropriate "file not found" 
error message. 

[0043] After reading the ASP+ resource 310 into memory, the page factory module 308 processes the file content 
to build a data model of the page (e.g., lists of script blocks, directives, static text regions, hierarchical server-side 
control objects, server-side control properties, etc.). The data model is used to generate a source listing of a new object 
55 class, such as a COM+ ("Component Object Model+") class that extends the page base class. The page base class 
includes code that defines the structure, properties, and functionality of a basic page object. The source listing is then 
dynamically compiled into an intermediate language. An intermediate language may include general or custom-built 
language code, such as COM+ IL code, Java bytecodes, Modula 3 code, SmallTalk code, and Visual Basic code. In 
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transport protocols, including without limitation S-HTTP, are contemplated within the scope of the present invention. 
On the web server 116, an HTTP pipeline module 118 receives an HTTP request 114, resolves the URL, and invokes 
an appropriate handler 1 20 for processing the request. In an embodiment of the present invention, a plurality of handlers 
120 for handling different types of resources is provided on the web server 116. 

5 [0031] For example, if the URL specifies a static content file 1 22, such as an HTML file, a handler 1 20 accesses the 
static content file 1 22 and passes the static content file 1 22 back through the HTTP pipeline 1 1 8 for communication to 
the client 100 in an HTTP response 112. Alternatively, in an embodiment of the present invention, if the URL specifies 
a dynamic content file 124, such as an ASP+ resource, a handler 1 20 accesses the dynamic content file 1 24, processes 
the contents of the dynamic content file 124, and generates the resulting HTML code for the web page 104. In an 

10 embodiment of the present invention, the resulting HTML code includes standard HTML 3.2 code. Generally, a dynamic 
content file is a server-side declaration datastore (e.g., an ASP+ resource) that can be used to dynamically generate 
the authoring language code that describes a web page to be displayed on a client. The HTML code for the web page 
is then passed through the HTTP pipeline 118 for communication to the client 100 in an HTTP response 112. 
[0032] During its processing, a handler 120 can also access libraries of pre-developed or third party code to simplify 

15 the development effort. One such library is a server-side class control library 126, from which the handler 120 can 
instantiate server-side control objects for processing user interface elements and generating the resultant HTML data 
for display of a web page. In an embodiment of the present invention, one or more server-side control objects map to 
one or more user interface elements, visible or hidden, on the web page described in the dynamic content file 124. 
[0033] A second library, in contrast, is a client-side control class library 128, such as a library including "ACTIVEX" 

20 components from Microsoft Corporation. An "ACTIVEX" control is a COM ("Component Object Model") object that 
follows certain standards in how it interacts with its client and other components. A client-side "ACTIVEX" control, for 
example, is a COM-based component that can be automatically downloaded to a client and executed by a web browser 
on the client. Server-side ACTIVEX components (not shown) are COM-based components that may be implemented 
on a server to perform a variety of server-side functions, such as providing the server-side functionality of a stock price 

25 look-up application or database component. A more detailed discussion of ACTIVEX can be found in "Understanding 
ACTIVEX and OLE", David Chappell, Microsoft Press, 1996. i 

[0034] In contrast to "ACTIVEX" controls, a server-side control object in an embodiment of the present invention, 
being specified in a dynamic content resource 1 24, logically corresponds to a user interface element that is incorporated 
in the web page on the client. The server-side control object can also generate valid HTML code that can include, for 

30 example, an HTML tag and a locator referencing a given client-side "ACTIVEX" control. If the browser already has the 
code for the client-side "ACTIVEX" control within its storage system, the browser executes the "ACTIVEX" control 
within the web page on the client. Otherwise, the browser downloads the code for the "ACTIVEX" control from the 
resource specified by the locator and then executes the "ACTIVEX" control within the web page on the client. A server- 
side control object in an embodiment of the present invention can also raise events to a server-side "ACTIVEX" control 

35 used to implement a stock look-up application on the server. 

[0035] A handler 120 also has access to one or more non-user-interface server components 130 that execute on 
the web server 116 or on another accessible web server. A non-user-interface server component 130, such as a stock 
price look-up application or database component, may be referenced in or associated with a dynamic content file 124 
that is processed by a handler 120. Sever-side events raised by the control objects declared in the dynamic content 

40 file 124 may be processed by server-side code, which calls appropriate methods of the non-user-interface server 
component 130. As a result, the processing provided by the server-side control objects simplifies the programming of 
the non-user-interface server component 130 by encapsulating the processing and generation of the user interface 
elements of a web page, which allows the developer of the non-user-interface server component 130 to concentrate 
on the specific functionality of the application, rather than on user interface issues. 

45 [0036] FIG. 2 illustrates a flow diagram of operations for processing and generating client-side user interface ele- 
ments using server-side control objects in an embodiment of the present invention. In operation 200, the client transmits 
an HTTP request to the server. The HTTP request includes a URL that specifies a resource, such as an ASP+ resource. 
In operation 202, the server receives the HTTP request and invokes the appropriate handler for processing the specified 
resource. The HTTP request includes a transportable state structure including state information, and optionally hier- 

50 archical information, associated with one or more server-side control objects, although the first HTTP request to a 
given page typically does not include an transportable state structure because no state changes have occurred at the 
server for the given page. In addition, the transportable state structure may include property data type information, and 
an integrity code to assist the server in validating the state information (i.e., verify that the state information was not 
corrupted at the client). Operation 204 generates a server-side control object hierarchy based on the contents of the 

55 specified dynamic content file (e.g., the ASP+ resource). The ASP+ resource is read in operation 203. Operation 205 
loads state information received in the transportable state structure to the appropriate server-side control objects in 
the hierarchy to restore the control objects to their previous state. 

[0037] In operation 206, the server-side control objects of the control object hierarchy perform one or more of the 
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an alternative embodiment, the intermediate language operations may be omitted, so that the native instructions are 
generated directly from the source listing or the source file (e.g., the ASP+ resource 310). A control class library 312 
may be accessed by the page factory module 308 to obtain predefined server-side control classes used in the gener- 
ation of the control object hierarchy. 

5 [0044] The page factory module 308 outputs a page object 314, which is a server-side control object that corresponds 
to the web page 104 of FIG. 1. The page object 314 and its children (i.e., a text box object 318, a button object 320, 
and another button object 322) comprise an exemplary control object hierarchy 316. Other exemplary control objects 
are also contemplated in accordance with the present invention, including without limitation objects corresponding to 
the HTML controls in Table 1 , as well as custom control objects. The page object 314 logically corresponds to the web 

10 page 104 or FIG. 1. The text box object 318 corresponds to the text box 106 in FIG. 1. Likewise, the button object 320 
corresponds to the add button 108 in FIG. 1, and the button object 322 corresponds to the delete button 110 in FIG. 
1 . The page object 314 is hierarchically related to other control objects on the server. In one embodiment, a page object 
is a container object that hierarchically contains its children control objects. In an alternative embodiment, other forms 
of hierarchical relation may be employed, including a dependency relationship. In a more complex control object hier- 

*5 archy with multiple levels of children, a child object can be a container object for other child objects. 

[0045] In the illustrated embodiment, the control objects in the control object hierarchy 31 6 are created and executed 
on the server 3000, and each server-side control object "mirrors" a corresponding user interface element on the client. 
The server-side control objects of this embodiment also cooperate to handle input from the HTTP request 302, to 
manage the states of server-side control objects, to perform data binding with server-side databases, and to generate 

20 authoring language data (e.g., HTML code) used to display a resulting web page at a client. The resulting authoring 
language data is generated (i.e., rendered) from the server-side control object hierarchy 316 and transmitted to the 
client in an HTTP response 324. For example, resulting HTML code may embody any valid HTML construct and may 
reference ACTIVEX-type controls, JAVA applets, scripts, and any other web resources that yield client-side user inter- 
face elements (e.g., control buttons, text boxes, etc.) when processed by a browser. 

25 [0046] By virtue of declarations made in the ASP+ resource 31 0, server-side control objects may access one or more 
non-user-interface server components 330 to provide interaction between the non-user-interface server component 
330 and client-side user interface elements. For example, in response to postback input, server-side control objects 
can raise server-side events to the non -user-interface server components registered for those events. In this manner 
the non-user-interface server component 330 can interact with the user through user interface elements without pro- 

30 gramming the code required to display and process these elements. 

[0047] In summary, an embodiment of the present invention includes server-side control objects that are created 
and executed on the server to generate HTML code that is sent to a client. The HTML code may, for example, embody 
any valid HTML constructs and may reference ACTIVEX-type controls, JAVA applets, scripts and any other web re- 
sources to produce user interface buttons and other user interface elements at the client. A user at the client may 

35 interact with these user interface elements, which logically correspond to the server-side control objects, and send a 
request back to the server The server-side control objects are recreated on the server to process the data, events, 
and other characteristics of the user interface elements so as to generate the next round of HTM L code to be transmitted 
in a response to the client. 

[0048] With reference to FIG. 4, an exemplary computing system for embodiments of the invention includes a general 
40 purpose computing device in the form of a conventional computer system 400, including a processor unit 402, a system 
memory 404, and a system bus 406 that couples various system components including the system memory 404 to the 
processor unit 400. The system bus 406 may be any of several types of bus structures including a memory bus or 
memory controller, a peripheral bus and a local bus using any of a variety of bus architectures. The system memory 
includes read only memory (ROM) 408 and random access memory (RAM) 410. A basic input/output system 412 
45 (BIOS), which contains basic routines that help transfer information between elements within the computer system 
400, is stored in ROM 408. 

[0049] The computer system 400 further includes a hard disk drive 412 for reading from and writing to a hard disk, 
a magnetic disk drive 414 for reading from or writing to a removable magnetic disk 416, and an optical disk drive 418 
for reading from or writing to a removable optical disk 419 such as a CD ROM, DVD, or other optical media. The hard 
50 disk drive 412, magnetic disk drive 414, and optical disk drive 418 are connected to the system bus 406 by a hard disk 
drive interface 420, a magnetic disk drive interface 422, and an optical drive interface 424, respectively. The drives 
and their associated computer-readable media provide nonvolatile storage of computer readable instructions, data 
structures, programs, and other data for the computer system 400. 

[0050] Although the exemplary environment described herein employs a hard disk, a removable magnetic disk 41 6, 
55 and a removable optical disk 41 9, other types of computer-readable media capable of storing data can be used in the 
exemplary system. Examples of these other types of computer-readable mediums that can be used in the exemplary 
operating environment include magnetic cassettes, flash memory cards, digital video disks, Bernoulli cartridges, ran- 
dom access memories (RAMs), and read only memories (ROMs). 
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[0051] A number of program modules may be stored on the hard disk, magnetic disk 416, optical disk 419, ROM 
408 or RAM 410, including an operating system 426, one or more application programs 428, other program modules 
430, and program data 432. A user may enter commands and information into the computer system 400 through input 
devices such as a keyboard 434 and mouse 436 or other pointing device. Examples of other input devices may include 

5 a microphone, joystick, game pad, satellite dish, and scanner. These and other input devices are often connected to 
the processing unit 402 through a serial port interface 440 that is coupled to the system bus 406. Nevertheless, these 
input devices also may be connected by other interfaces, such as a parallel port, game port, or a universal serial bus 
(USB). A monitor 442 or other type of display device is also connected to the system bus 406 via an interface, such 
as a video adapter 444. In addition to the monitor 442, computer systems typically include other peripheral output 

10 devices (not shown), such as speakers and printers. 

[0052] The computer system 400 may operate in a networked environment using logical connections to one or more 
remote computers, such as a remote computer 446. The remote computer 446 may be a computer system, a server, 
a router, a network PC, a peer device or other common network node, and typically includes many or all of the elements 
described above relative to the computer system 400. The network connections include a local area network (LAN) 

15 448 and a wide area network (WAN) 450. Such networking environments are commonplace in offices, enterprise-wide 
computer networks, intranets, and the Internet. 

[0053] When used in a LAN networking environment, the computer system 400 is connected to the local network 
448 through a network interface or adapter 452. When used in a WAN networking environment, the computer system 
400 typically includes a modem 454 or other means for establishing communications over the wide area network 450, 
20 such as the Internet. The modem 454, which may be internal or external, is connected to the system bus 406 via the 
serial port interface 440. In a networked environment, program modules depicted relative to the computer system 400, 
or portions thereof, may be stored in the remote memory storage device. It will be appreciated that the network con- 
nections shown are exemplary, and other means of establishing a communication link between the computers may be 
used. 

25 [0054] In an embodiment of the present invention, the computer 400 represents a web server, wherein the cpu 402 
executes a page factory module on an ASP+ resource stored on at least one of storage media 416, 412, 414, 418, 
419, or memory 404. HTTP responses and requests are communicated over the LAN 448 that is coupled to a client 
computer 446. 

[0055] FIG. 5 illustrates a process flow diagram representing server-side processing of a page object and other 
30 control objects in an embodiment of the present invention. In operation 500, a page object constructor is called by the 
page factory module 308 (see FIG. 3). As a result, a page object (see e.g., the page object 314 in FIG. 3) is created 
to "mirror" the web page user interface element on the client. In operation 502, the page factory module calls the 
ProcessRequest member function of the page object, which initiates the staged operations for processing the HTTP 
request received from a client. In a first stage of one embodiment of the present invention, a server-side Create Op- 
35 eration (not shown) may create the descendant server-side control objects contained in the control object hierarchy of 
the page object, that is, constructors for child control objects are recursively called to create the control objects during 
the lifetime of the processing of the HTTP request processing. 

[0056] In an alternate embodiment, however, creation of child control objects is deferred until the control object is 
required for a given processing step (e.g., handling a postback event, handling postback data, loading or saving a 

40 viewstate, resolving data binding, or rendering HTML code for the corresponding user interface element). The latter 
embodiment, which is said to implement, "deferred control object creation", is an optimization that can alleviate unnec- 
essary CPU and memory utilization. For example, a user input event received from the client may result in the creation 
of a completely different web page. In this case, it is unnecessary to instantiate an entire control object hierarchy of 
the previous page only to process an event that immediately results in the termination of the control object hierarchy 

45 and the instantiation of a new and different control object hierarchy for a new page. 

[0057] In response to the server call to the page object's ProcessRequest method, operations 504 through 520 may 
be executed by the page object and by individual descendant control objects, depending in part on the data of a given 
HTTP request. In an embodiment of the present invention, the operations 504-520 are performed for each individual 
object in the order illustrated in FIG. 5; however, a given operation for one object may occur out of order or not at all 

so with respect to a given operation of another object, depending on the HTTP request. For example, a first object may 
perform its Init operation 504 and its Load operation 506, and begin postback data processing operation 508, before 
a descendant control object performs its own Init operation 504 and Load operation 506 by virtue of deferred control 
object creation. The order of operation processing by the page object and the descendent control objects depends on 
various factors, including without limitation the nature of the data in the HTTP request, the configuration of the control 

55 object hierarchy, the current state of the control objects, and whether deferred control object creation is implemented. 
[0058] The Init operation 504 initializes a control object after it is created by executing any server-side code associ- 
ated with initialization in the dynamic content file. In this manner, each server-side control object may be customized 
with specific server-side functionality that is declared in the dynamic content file. In an embodiment of the present 
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invention, dynamic content code intended to customize or extend the base page control classes as declared by the 
page developer in the ASP+ resource on the server. When the ASP+ resource is compiled, the declared code is included 
in the appropriate initialization code (e.g., the lnit() methods of the page object and the descendent control objects). 
The Init operation 504 executes this code to customize or extend the page base class and the base classes for de- 

5 scendent control objects. 

[0059] In an embodiment of the present invention, state management of the server-side control objects is supported 
in a Load operation 506 and a Save operation 516, which use a transportable state structure to accommodate the 
stateless model for client server systems by restoring server-side control objects to their previous states. In one em- 
bodiment, the state is communicated to and from the server in one or more hidden HTML fields of an HTTP request/ 

10 response pair, although other transportable state structures are contemplated within the scope of the present invention, 
including cookies and visible fields. 

[0060] In a given sequence of requests and responses relating to the current page between a client and a server, 
the states of one or more control objects are recorded into a transportable state structure by the Save operation 516 
after the processing of a previous request. In an embodiment of the present invention, additional state information is 

15 also included in the transportable state structure, including hierarchical information or control object identifiers to allow 
the server to associate a given state with the appropriate control object. In a subsequent HTTP request, the state 
information is returned to the server in the transportable state structure. The server extracts the state information from 
the received transportable state structure and loads the state data into the appropriate control objects within the control 
object hierarchy to restore each control object to its state as it existed prior to a previous HTTP response. After the 

20 current request is processed, the states of one or more server-side control objects are again recorded into the trans- 
portable state structure by the Save operation 516, and the transportable state structure is returned to the client in the 
next HTTP response. 

[0061] As a result of the Load operation 506, each server-side control object is placed in a state consistent with its 
state prior to a previous HTTP response. For example, if a text box control object includes a property value equaling 
25 "JDoe" prior to a previous HTTP response, the Load operation 506 restores the same control object to its previous 
state, in part by loading the text string "JDoe" into the property value. In addition, whether the state of a given object 
is stored and restored is configurable. 

[0062] In summary of one embodiment of the present invention, the state of one or more server-side control objects 
is "saved" after processing. The saved state information is transmitted to the client in a response. The client returns 

30 the saved state information to the server in a subsequent response. The server loads the state information a freshly 
instantiated server-side control object hierarchy, such that the state of the hierarchy is restored to its previous state. 
[0063] An alternative embodiment may maintain the state information on the server or at some other web location 
accessible by the server during the round trip from the server to the client, and then back to the server. After the client 
request is received by the server, this state information may be retrieved by the server and loaded into the appropriate 

35 server-side control object(s) in the control object hierarchy. 

[0064] In operation 508, postback data received from the HTTP request is processed. Postback data may be included 
in the payload of the HTTP request in key-value pairs, in a hierarchical representation (e.g., XML), or in other data 
representations, such as RDF ("Resource Description Framework"). Operation 508 parses the payload to identify a 
unique identifier of a server-side control object. If the identifier (e.g. "page1:text1") is found and the identified server- 

40 side control object exists in the control object hierarchy, the corresponding postback data is passed to the control 
object. For example, referring to FIG. 1, a unique identifier associated with textbox 106 and the text "JDoe" are com- 
municated in the payload of the HTTP request 114 to the web server 116. Operation 508 parses the payload of the 
HTTP request 114 and obtains the unique identifier of the textbox 106 and its associated value (i.e., "JDoe"). Operation 
508 then resolves the unique identifier of the textbox 106 to identify the corresponding server-side control object and 

45 passes the "JDoe" value to the object for processing. 

[0065] As discussed with regard to the Load operation 506, the property values of server-side control objects may 
be restored to their previous states. In response to the receipt of postback data, the server-side control object deter- 
mines whether the passed-in postback value causes a change from the corresponding property's previous value. If 
so, the change is logged in a change list to indicate a data change for the associated control object. After ail postback 

50 data has been processed within the control object hierarchy, a call may be made to a control object method to raise 
one or more postback data changed events to one or more non-user-interface server components, such as a stock 
price look-up application running on the server. An example of a postback data changed event is an event indicating 
that postback data has caused a property of a server-side control object to change. In an exemplary embodiment, such 
an event can be sent to a system-provided event queue so that a server component that is registered to process the 

55 event may be invoked. In this manner, a server-side non-user-interface server component can respond to events trig- 
gered by a change in data of a server-side control object. Alternative methods of implementing events are also con- 
templated in the scope of the present invention, including using application-provided event queues, polling, and 
processing interrupts. i 


9 


EP 1 164 473 A2 


[0066] In operation 510, postback events are handled. Postback events are communicated in the payload of the 
HTTP request. Operation 510 parses a specified event target (e.g., labeled "_EVENTTARGET" in an embodiment of 
the present invention) identifying the server-side control object to which the event is directed. Furthermore, operation 
51 0 parses the located event arguments, if any, and provides the event argument (e.g., labeled "_EVENTARGUMENT" 
5 in an embodiment of the present invention) to the specified server-side control object. The control object raises its 
events for processing by the non-user-interface server component (e.g., a server-side stock price look-up applications) 
associated with the dynamic content file. 

[0067] Operation 512 resolves data binding between the server-side control objects and one or more databases 
accessible by the server. In an embodiment of the present invention, properties of server-side control objects may be 

10 associated (or data bound) to properties of a parent data binding container, such as a table in a server-side application 
database. During the data binding operation 612, the page framework may update a data bound control object property 
with the value of the corresponding parent data binding container property. In this manner, user interface elements on 
the web page of the next response accurately reflect updated property values, because the control object properties 
to which the user interface elements correspond have been automatically updated during the data binding operation 

15 51 2. Likewise, control object properties can also be updated to the parent data binding container fields, thereby updating 
a server-side application database with postback input from a server-side control object. 

[0068] Operation 514 performs miscellaneous update operations that may be executed before the control object 
state is saved and the output is rendered. Operation 516 requests state information (i.e., viewstate) from one or more 
control objects in the control object hierarchy and stores the state information for insertion into a transportable state 

20 structure that is communicated to the client in the HTTP response payload. For example, a "grid" control object may 
save a current index page of a list of values so that the "grid" control object may be restored to this state after a 
subsequent HTTP request (i.e., in operation 506). As described above, the view state information represents the state 
of the control object hierarchy prior to any subsequent actions by the client (e.g., before the HTTP response is sent to 
the client). When the view state information is returned, it will be used to place the control object hierarchy in that 

25 previous state prior to processing any client postback input or databinding. 

[0069] The render operation 518 generates the appropriate authoring language output (e.g., HTML data) for com- 
munication to the client in an HTTP response. Rendering is accomplished through a top-down hierarchical tree walk 
of all server-side control objects and embedded rendering code. Operation 520 performs any final cleanup work (e.g., 
closing files or database connections) before the control object hierarchy is terminated. Processing then returns to 

30 operation 502 and proceeds to operation 522 where the page object is terminated by calling its destructor. 

[0070] FIG. 6 illustrates an exemplary portion of a dynamic content file (e.g., an ASP+ resource) in an embodiment 
of the present invention. Line 1 of the ASP+ resource 600 is a start tag of an HTML file and is declared in the ASP+ 
resource 600 as a literal. A literal corresponds to a server-side literal control object in the server-side control object 
hierarchy. The literal control object corresponding to line 1 is given an index ofO" because it is the first control object 

35 resulting from a declaration in the ASP+ resource 600. At render time, the literal control object merely generates the 
"<html>" text and a new line for inclusion in the HTTP response. Lines 2 through 1 2 of the ASP+ resource 600 represent 
a code declaration block, which is executed on the server (i.e., as indicated by the "runat = server" attribute on line 2). 
In the exemplary ASP+ resource 600, the code declaration block does not result in the instantiation of a server-side 
control object in the control object hierarchy. Instead, the code declaration block results in server-side code being 

<o "wired" to or associated with the server-side control object declared in line 1 5. Line 13 of the ASP+ resource 600 is a 
start tag of the body of the HTML file and is declared in the ASP+ resource 600 as a literal to result in a literal control 
object having an index equaling "1". 

[0071] The declaration on line 14 declares a server-side form control object (index= "2") that is to be instantiated 
into the control object hierarchy. The tags on line 17 and 18 are closing tags to be represented by a server-side literal 
45 control object (index="3") in the control object hierarchy. The closing tag on line 16 closes the <form> declarations 
corresponding to the form control object. 

[0072] In a subsequent level of hierarchy, the declaration on line 15 declares a server-side label control object (in- 
dex="1") using the HTML control tag "span" and having the identifier attribute ("id") equaling "Message". Indices "0" 
and "2" of this level of hierarchy are allocated respectively to a literal control object (index = w 0") for a preceding white 
50 space literal (e.g., tabs, new lines, spaces, etc.) and a literal control object (index = "2") of a subsequent white space 
literal. 

[0073] FIG. 7 illustrates resultant code generated by one or more server side control objects in response to the 
exemplary portion of the dynamic content file of FIG. 6. Only the form, state management, and span sections are 
illustrated in an HTML code portion 700 to facilitate this discussion. Other tags, such as the <htm1> and <body> tags, 
55 are not included in the HTML code portion 700, although the HTML code for these tags would be included in a set of 
complete HTML code resulting from the ASP+ resource of FIG. 6. 

[0074] Lines 1 and 5 are starting and ending tags of the form section of the HTML code and are generated by the 
server-side form control objects declared at lines 14 through 16 of FIG. 6. Line 4 includes the HTML code for a label 
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displaying the date of the Last Post Back operation (i.e., "Last Post Back: 5/6/99 M ), which was declared in line 15 of 
FIG. 6. 

[0075] The hidden fields on lines 2 and 3 represent an embodiment of a transportable state structure in accordance 
with the present invention. On line 2, the state information of the server-side control objects declared in the ASP+ 

5 resource 600 is recorded in the hidden field named "_VIEWSTATE M . The value of the _VIEWSTATE field is a text string 
representing the state values, property types, and hierarchical information of the control objects in the control object 
hierarchy. Hierarchical information is also included in the _VIEWSTATE field to allow the Load operation to traverse 
the hierarchy and load a given state value into a property of an appropriate control object in the hierarchy. 
[0076] In an embodiment of the present invention, a client interacts with a web server using a sequence of HTTP 

10 request/response pairs. Between a response to the client and the next request received by the server, the server may 
not maintain the state of the server-side control objects associated with a given ASP+ resource or a given connection 
with the client. Instead, the state information for a given control object hierarchy is sent to the client in a transportable 
state structure (e.g., in the HTTP response), and returned to the server in the transportable state structure (e.g., in the 
next HTTP request). 

15 [0077] Line 3 represents a hidden field named "_VIEWSTATEMAC" having a value of "434333433". The 
_VIEWSTATEMAC is an integrity code in the transportable state structure that is used by the Load operation to verify 
that the _VIEWSTATE value was not corrupted at the client. The _VIEWSTATEMAC value is initially calculated at the 
server from the contents of the _VIEWSTATE value and communicated to the client in a response. When the client 
returns the transportable state structure, the web server calculates a new integrity code from the contents of the received 

20 _VIEWSTATE value. If the received integrity code and the newly calculated code are equal, then the web server as- 
sumes that the received _VIEWSTATE value is valid or otherwise uncorrupted (i.e., is the same as the _VIEWSTATE 
value that was previously sent to the client). In an embodiment of the present invention, an MD5 algorithm is used to 
calculate the integrity code. MD5 is an algorithm created in 1991 by Professor Ronald Rivest for use in creating digital 
signatures. MD5 is a one-way hash function, meaning that it takes a message and converts it into a fixed string of 

25 digits, also called a message digest. Such methods may include the use of a secret key to discourage tampering by 
unauthorized individuals or programs. Other embodiments, however, may include alternative integrity coding tech- 
niques, including generating a code based on the MD4 algorithm or any other hash algorithm, or the length of the 
_VIEWSTATE field. 

[0078] In an embodiment of the present invention, the structure of the _VIEWSTATE field of line 2 represents a 
30 hierarchical nesting of control objects and their states (e.g., state values and their associated property data types). 
The tags used in an exemplary _VIEWSTATE field are described in Table 1 . Tags that include a T character represent 
closing tags. 


TABLE 1 


Tag 

Description 

<s>, </s> 

string value 

<ax>, </a> 

array having x elements 

<i> 

integer value 

<hx>, </H> 

hash table having x table entries 

<K>, </K> 

hash table key 

<V>, <N> 

hash table value 

<b>, </b> 

Boolean value 

<d>, </d> 

date/time value 

<c>, </c> 

currency value 

<A>, </A> 

array list 

<n>, </n> 

null value : 


[0079] It should be understood that an exemplary encoding embodiment is disclosed herein, although in alternative 
embodiments, other encoding methods may be employed. For example, hierarchy information, state values and their 
associated property data types may be designated using unique hierarchical identifiers for each server-side control 
object, or an XML-related data format may be employed to represent the data in a transportable state structure. In 
addition, known encryption and compression techniques may be use to provide security and to reduce the size of the 
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transportable state structure. 

[0080] FIG. 8 illustrates the control object hierarchy corresponding to the ASP+ resource of FIG. 6 and 
the_VIEWSTATE field value of FIG. 7 in an embodiment of the present invention. A file check block 802, while not a 
control object component of the control object hierarchy, is illustrated as a top level of hierarchy based on the 
5 _VIEWSTATE field structure, such as shown in FIG. 7. A more detailed description of the file check block 802 is provided 
with regard to FIG. 9. Alternatively, omitting the file check block 802 or merging it into the level of hierarchy correspond- 
ing to a page control object 804 is contemplated within the scope of the present invention. 

[0081] The page control object 804 corresponds to a special control object instantiated as the top level of the control 
object hierarchy and corresponding to the resulting web page itself. In an embodiment of the present invention, no 
10 specific declaration (i.e., a declaration having the "runat = server" attribute) is required to cause an instantiation of the 
page object 804, 

[0082] At the next level of hierarchy, control objects 806, 808, 810, and 81 2 are instantiated as child control objects 
contained by or hierarchically related to the page object 804. Each control object in a level of hierarchy is assigned a 
zero-based index based on its top-down order in the ASP+ resource. For example, literal control object 806 corresponds 

15 to the "<htmt>" text and associated white spaces on line 1 of the ASP+ resource 600 in FIG. 6. Accordingly, the literal 
control object 806 is assigned an index equaling "0". In the illustrated embodiment of the present invention, the code 
declaration block extending from lines 2-12 does not result in the instantiation of a corresponding control object. The 
literal control object 808 corresponds to the "<body>" text and associated white space on line 1 3 of the ASP+ resource 
600 of FIG. 6. Accordingly, the literal control object 808 is assigned an index equaling "1". The form control object 810 

20 corresponds to the form declaration on lines 14 through 16 of the ASP+ resource 600 of FIG. 6. Accordingly, the form 
control object 810 is assigned an index equaling "2". The literal control object 812 corresponds to the closing tags and 
associated white space on lines 17 and 18 of the ASP+ resource 600 of FIG. 6. Accordingly, the literal control object 
812 is assigned an index equaling "3". 

[0083] At the next level of hierarchy, control objects 814, 816 and 818 are instantiated as child control objects con- 
25 tained by or hierarchically related to the form control object 810. The literal control object 814 corresponds to white 
space preceding the span declaration on line 15 of the ASP+ resource 600 of FIG. 6. Accordingly, the literal control 
object 814 is assigned an index of "0", because it is the first literal text (albeit white space) encountered in association 
with this level of hierarchy in the ASP+ resource. Likewise, the literal control object 818 corresponds to white space 
following the span declaration of line 15 in the ASP+ resource 600 of FIG. 6. Accordingly, the literal control object 818 
30 is assigned an index of "2". The label control object 816 corresponds to the declaration on line 15 of the ASP+ resource 
600 in FIG. 6. Accordingly, the label control object 816 is assigned an index equaling "1". 

[0084] FIG. 9 illustrates a nested version of the _VIEWSTATE field value of FIG. 7. The nested version is depicted 
herein to facilitate discussion of the hierarchical nature of the _VIEWSTATE field. Line 1 of the nested version 900 
corresponds to the beginning of the nested file check block 802 of FIG. 8. Line 1 specifies a two-element array, com- 

35 prising a string on line 2 as the first element and a two-element array of line 3 as the second element. Line 2 specifies 
a string value representing a file check code. In an embodiment to the present invention, the file check code is calculated 
as a hash value of the associated ASP+ resource (e.g., ASP+ resource 600 of FIG. 6). The array started on line 3 
represents the beginning of state information for the next level of hierarchy, namely the page control object 804 of FIG. 
8. The null value on line 4 represents the first element of the two-element array of line 3, which is capable of holding 

40 state information relating to properties of the page object itself. In the illustrated embodiment, no state information is 
recorded for the page object, so the value equals "null". 

[0085] As shown in line 5, the second element of the two-element array of line 3 indicates a hash table including 
state information for the page control object's children (namely, control objects 806, 808, 810 and 812 of FIG. 8). The 
hash table of line 5 includes one hash table entry, as indicated by the "1" in the tag <H1 >. The <K>, </K> tags on lines 

45 6 and 8 encompass the key for the hash table entry, namely the integer value "2" indicated in line 7, which corresponds 
to the index of the form control object 810 of FIG. 8. The _VIEWSTATE value depicted in FIG. 9 includes no state 
information for the literal control objects 806, 808, and 812 of FIG. 8. Alternatively, if other control objects having saved 
state information or child control objects existed at the same level of hierarchy as the form control object 810, then the 
hash table at this level may have more than one hash table entry to accommodate the additional control objects at this 

50 level, and the key to each additional hash table entry would be the index of the corresponding control object. 

[0086] The value of the hash table entry is encompassed by the <V>, <A/> tags of lines 9 and 24 and includes another 
two-element array to define the state of the form control object and its children. The first element of the array specifies 
the saved state information for the form control object (i.e., represented by a null value in this embodiment). 
[0087] The second element specifies another one-entry hash table representing the state information for the children 

55 of the form control object. The <K>, </K> tags on lines 13 and 15 encompass the key for the single hash table entry, 
namely the integer value "1" indicated in line 14, which corresponds to the index of the label control object 816 of FIG. 
8. The _VIEWSTATE value depicted in FIG. 9 includes no state information for the literal control objects 814, and 818 
of FIG. 8. 


12 


EP 1 164 473 A2 


[0088] The value of the hash table entry is encompassed by the <V> ( </V> tags of lines 16 and 21 and includes 
another two-element array to define the state of the label control object and its children. The first element of the array 
specifies the saved state information for a property of the label control object, which is the string value "Inner- 
Html=5/16/99" specified in line 18. The property name, "InnerHtml" equals the state value "5/16/99" and is of type 
"string". The semicolon represents the end of the state value for a given property. If the label control object of line 18 
included additional properties for which the state was saved, each state data value and its associated property would 
be delimited by an ending semicolon. The null value indicated in line 1 9 as in the second element of the array indicates 
that label control object does not contain any children. The lines 20-27 represent closing tags for preceding starting 
tags in FIG. 9. 

[0089] In an alternative embodiment, a serialization format called Limited Object Serialization (LOS) format is used 
in a transportable state structure. In general, LOS format specifies a hash table of name/value pairs for each control 
object, wherein each hash entry contains either state information for a property of the control object or a nested hash 
table of a child control object. 

[0090] Table 2 illustrates an exemplary grammar of the LOS format. 
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wmsam 



control 
object 

• value type-table op t 

• h<namel ;valuel>\t50System. 

value 

• typed-value 

• untyped-value 

• typed-array- value 

• untyped-array-value 

• untyped-hashtable- 
value 

• 50<red> 

• <red> 

• aju^-reujDiuejgreen^* 

• a<red;blue;green> 

• h<name 1 ; value 1 > 

typed- 
value 

• type-ref value-list- 
start value-ref value- 

1 * A. J 

list-end 

• 50<red> 

typed- 
array- 
value 

• array-modifier type- 
ref value-list-start 
array-value-ref value- 
list-end 

• a50<red;blue;green> 

untyped- 
value 

• value-ref 

• <red> 

untyped- 
array- 
value 

• array-modifier value- 
list-start array-value- 
ref value-hst-end 

• a<red;blue;green> 

value-list- 
start 

• < 


value-list- 
end 

• > 


value-list- 
separator 

• ; 


array- 
modifier 

• a 


hashtable- 
modifier 

• h 


untyped- 

hashtable- 

value 

• hashtable-modiner 
value-list-start 
hashtable- value-ref 
value-list-end 

• h<namel; value 1> 

value-ref 

• string-value 

• bin-ref base64- 
persisted-object 

• YThis is a string valueA" 
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px^pIe^^M^Jil^^^. 

bin-ref 

• escape-char b 

• \b 

array- 
value-ref 

• value i ; [ value2 ; [ valuen] ] 

• red;blue;green 

hashtable- 
value-ref 

• name-refi;valuei 
[value-list-separator 
name-ref2jvalue2 
[value-list-separator 
name-refnjvaluen]] 

• <namel ;value 1 ; name2;value2; 
name3;value3> 

name-ref 

• string-name-number 

• string-name 

• 1 

• BackColor 

type -re f 

• known-type-number 

• string-type-number 

• string-type 

• 10 

• 50 

• System.Drawing.Color 

tvue-table 

• tvne-tahle-start strinff- 
type-number] string- 
type \[ value-list- 
separator string-type- 
number2 string- 
type2[value-list- 
separator string-type- 
number n string-typen;]] 

• \t50Svstem Drawine Color*51Svste 
m.Drawing.Font 

name-table 

• name-table-start string- 

nnmViPTi ^trinc*- 

namei [value- list- 
separator string-name- 
number 2 string- 
name2 [value-list- 
separator string-name- 
number n string- 
name*;]] 

• \nlBackColor;2ForeColor 

known- 
type- 
number 

• 0123456789 

• 10 1112 13 14 15 16 
17 18 19 

• 20 21 22 23 24 25 26 
27 28 29 

• 30 31 32 33 34 35 36 
37 38 39 

• 40 41 42 43 44 45 46 
47 48 49 


type-table- 
start 

• escape-char t 

• \t 

name- 
table-start 

• escape-char n 

• \n 

string- 
terminator- 
char 

• value-list-separator 
value-list-end \ 
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5 

escaped- 
string 

• escape-char string- 
terminator-char 

• V 


escape- 
char 

• \ 


10 

string- 
number 

• 0123456789 



base64- 

persisted- 

object 

• Any object that is 
BinarySerialized and 
then base64 encoded 


15 

string- 
name 

• Any string that is set 
off by a string 
delimiter 


20 

string-type 

• Any string that 

matches a COM+ class 
name and that is set on 
by a string delimiter 


25 

string- 
value 

• Any string that is set 
off by a string 
delimiter that can be 
converted using the 
type's TypeCon verier 



Table 2 


[0091] As a first example of how the LOS format may be used, consider the entry: 
h<name1 ;value1 ;name2;value with \; escaped \> \"characters\"> 
35 which defines a hash table of 2 name/value pairs, wherein the values are all strings. The first value is named "namel " 
and equals the string "valuel". The second value is named M name2" and equals the string "value with ; escaped > 
"characters"". 

[0092] As a second example of how LOS format may be used, consider the entry: 
h<contro!1 ;h<1 ;50<blue>;text;hello>controf2;h<1 ;50<red>; 

40 control3;>\t50System. Drawing. Color\n 1 BackColor 

which defines a hash table having three hash entries: "controM", "control2", and "control3". The first hash entry is 
named "controM" and includes a child hash table having two entries, which are name/value pairs. The name of the 
first entry in the controll hash table uses the index "1" to reference the name "BackColor", which is defined at the end 
of the example. The value of the first entry equals "blue" and is of type "System. Drawing.Color", which is specified by 

45 the index "50" and defined near the end of the example. The name/value pair of the second entry in the controM hash 
table includes the name "text" and the value "hello". The "control2" hash entry includes child hash table having one 
hash entry, which also uses the index "1" to reference the name "BackColor". The value equals "red" and is of type 
"System. Drawing.Color". The "control3" hash table is empty. In a manner similar to that of the previously disclosed 
embodiment, hierarchy is specified by the nesting of the hash tables; however, other methods of describing hierarchy 

50 are contemplated within the scope of the present invention, including the use of hierarchical identifiers. 

[0093] FIG. 10 illustrates a process flow diagram for receiving a transportable state structure and loading state in- 
formation stored therein into control objects of a control object hierarchy in an embodiment of the present invention. 
In the illustrated embodiment, a transportable state structure may not be sent from the server (and, therefore, not 
returned to the server by the client) unless at least one property changed for at least one server-side control object. 

55 As such, the illustrated flow diagram assumes that at least one element of state information exists in the received 
transportable state structure. In an alternative embodiment, the transportable state structure may be round-tripped 
between the server and the client, even if no state information exists therein. In such embodiment, a decision operation 
(not shown) could operate to abort the state management process if no state information exists in the transportable 
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state structure. 

[0094] Receiving operation 1000 receives a transportable state structure from a client, such as in an HTTP request. 
Marking operation 1002 sets an initial state indication for all control objects in the server-side hierarchy. Reading op- 
eration 1 004 reads the received transportable state structure to extract the state information and corresponding property 
5 types. 

[0095] Checking operation 1006 performs an integrity check on the transportable state structure (e.g., using the 
_VIEWSTATEMAC Value). In an embodiment of the present invention, checking operation 1006 involves (1) reading 
a received integrity code from the transportable state structure; (2) calculating an integrity code of its own from at least 
the state information included in the transportable state structure; and (3) comparing the received integrity code with 
10 the newly calculated integrity code to determine if the transportable state structure has been corrupted during the round 
trip to the client. If the transportable state structure is determined to be corrupted, the server-side code can respond 
to handle the exception, including by aborting the load operation, continuing with processing in the absence of state 
information or raising an error. 

[0096] A verification operation 1008 verifies the file check code included in the transportable state structure. In an 
* 5 embodiment of the present invention, verification operation 1 008 includes (1 ) reading the received file check code from 
the _VIEWSTATE field; (2) calculating its own file check code from at least the contents of the ASP+ resource store 
on the server; (3) and comparing the received file check code with the newly calculated from file check code to determine 
whether the state information in the transportable state structure corresponds to the same version of the ASP+ resource 
on the server. Verification operation 1008 is used to verify that the ASP+ resource on the server did not change during 
20 the transportable state structure's round trip to the client. If the ASP+ resource on the server did change, then the 
server may discard the received state information, abort the load operation and/or signal an error to the client. In one 
embodiment, the control object hierarchy is created in its initial state and the load operation is aborted before the server 
proceeds with processing the request. Traversing operation 1010 traverses to the page control object of the server- 
side control object hierarchy. 

25 [0097] Parsing operation 1012 parses state information for a control object hierarchy corresponding to a control 
object in the nested _VIEWSTATE field. In the first iteration, the corresponding control object is the page control object 
traversed to in traversing operation 1010. In subsequent iterations, the corresponding control object is a descendant 
control object of the page control object and is located by the traversal operation 1028. The parsing operation 1012 
may extract a state value and convert the value, which is initially in a string format when it is parsed, into the given 

30 property type. Loading operation 1014 loads the state information parsed from the _VIEWSTATE value into a property 
of a control object. Indicating operation 1016 sets a change state indication for the current control object. This indication 
may be later used to only save the state of those control objects in which the state has changed from an initial state, 
thereby minimizing the size of the transportable state structure. Alternatively, all state information may be saved. During 
postback data handling, postback event handling, and data binding operations in the control object hierarchy, changes 

35 made to the state of a control object may also result in the setting of the changed state indication for individual control 
objects. In an embodiment of the present invention, however, any data change indication that is set due to data binding 
operations is reset so that the state of that property is not recorded in the transportable state structure, thereby further 
minimizing the size of the transportable state structure. The state of such a property is dependent on the data specified 
by the binding relationship, which will be updated in the data binding operation 512 of FIG. 5. 

40 [0098] Decision operation 1018 directs processing to operation 1022, if additional state information exists for the 
current control object. If so, operation 1022 parses the state information for the next control object property in the 
current control object and directs processing to operation 1014. If no additional state information is available for the 
current control object, decision operation 1018 directs processing to decision operation 1020, which directs processing 
to processing operation 1024 if no other control object state information is available in the _VIEWSTATE value. If 

45 decision operation 1020 determines that additional control objects exist for which states have not been processed, 
processing proceeds to operation 1026, which parses the state information for the next control object from the 
_VIEWSTATE value. Traversing operation 1028 traverses to the next control object corresponding to the new state 
information parsed in operation 1026. Thereafter, processing proceeds to loading operation 1014. The recursive parsing 
operations of FIG. 10 implement a deserializing operation in an embodiment of the presenting invention. 

50 [0099] FIG. 11 illustrates a process flow diagram for saving state information from control objects of a control object 
hierarchy into a transportable state structure for transmission to the client in an embodiment of the present invention. 
Initializing operation 1100 initializes a transportable state structure. Calculating operation 1102 calculates a file check 
code based on the current version of the ASP+ resource. In an embodiment of the present invention, the file check 
code is based on a hash algorithm (e.g., MD5 or other) of the ASP+ resource contents, such as merely hashing the 

55 file's contents or some specified component of the file. Loading operation 1104 loads the calculated file check code 
into the transportable state structure. Traversing operation 1106 traverses to the page object in the control object 
hierarchy. 

[01 00] In an embodiment of the present invention, a server-side control object can be created with a "MaintainState" 
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property, which indicates whether the property values of the control object (and its children) should be saved into the 
transportable state structure. If not, the traversal operation 11 06 may skip the server-side control object and its children 
in this process. Otherwise, if the state of the control object is to be maintained in accordance with the "MaintainState" 
property, then the traversal operation 1106 will traverse into the control object. 

5 [0101] Decision operation 1108 directs processing to reading operation 1115, which reads the new state value and 
its type from the control object property. Operation 1110 records the new state value and its type before proceeding to 
operation 1111. For the purposes of this discussion, if no property exists within the current control object, the property 
is represented by a "null" value in the __VIEWSTATE field. If the current control object's property is still in its initial state 
in operation 1108, processing proceeds to decision operation 1111 . If another property exists within the current control 

10 object in operation 1111 , processing proceeds to decision operation 1108. 

[0102] If no other property exists in the current control object in operation 1111, processing proceeds to decision 
operation 1112, which directs processing to traversal operation 1114 if another control object exists in the hierarchy. 
Traversal operation 1114 traverses to the next control object in the control object hierarchy and proceeds to decision 
operation 1108 to access the control object's property. If no other control object exists in the hierarchy in operation 

is 1112, processing proceeds to serializing operation 1116 which serializes the new state information (including state 
value types) obtained in the previous operations and stores them into the transportable state structure. Operation 1118 
calculates an integrity code (such as by using an MD5 algorithm), and operation 1120 stores the integrity code into the 
transportable state structure, such as in the _VI EWSTATEMAC field. It should be understood that the integrity code 
operations and the filed check code operations are optional and may be omitted in an alternative embodiment of the 

20 present invention. Operation 11 22 transmits the transportable state structure to the client, such as in an HTTP response 
containing the rendered HTML code generated by the control object hierarchy. 

[0103] The embodiments of the invention described herein are implemented as logical steps in one or more computer 
systems. The logical operations of the present invention are implemented (1 ) as a sequence of processor-implemented 
steps executing in one or more computer systems and (2) as interconnected machine modules within one or more 

25 computer systems. The implementation is a matter of choice, dependent on the performance requirements of the 
computer system implementing the invention. Accordingly, the logical operations making up the embodiments of the 
invention described herein are referred to variously as operations, steps, objects, or modules. 
[0104] The above specification, examples and data provide a complete description of the structure and use of em- 
bodiment of the invention. Since many embodiments of the invention can be made without departing from the spirit 

30 and scope of the invention, the invention resides in the claims hereinafter appended. 


Claims 

35 1 . A method for managing a state of a server-side control object corresponding to a client-side user interface element 
incorporated in a web page displayed on a client, the method comprising: 

creating the server-side control object in the control object hierarchy to process the cfient-side user interface 
element; 

40 receiving from the client a transportable state structure including state information indicating a state value for 

at least one server-side control object in the control object hierarchy, 
extracting the state information from the transportable state structure; and 

loading the state value from the state information into property of the server-side control object, if the state 
value is associated with the server-side control object. 

45 

2. The method of claim 1 wherein the extracting operation comprises: 

extracting from the transportable state structure a state value associated with a property of the at least one 
server-side control object; and 

so identifying a hierarchical location of the server-side control object within the control object hierarchy based on 

hierarchical information within the transportable state structure. 

3. The method of claim 1 or 2, in particular claim 2 wherein the loading operation comprises: 

55 locating the server-side control object within the control object hierarchy based on the hierarchical location 

identified in the identifying operation; 

traversing the hierarchical location of the server-side control object within the control object hierarchy; and 
storing the state value into the property of the server-side control object. 
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4. The method of any of claims 1 to 3, in particular claim 1 wherein the transportable state structure further includes 
a received integrity code, and further comprising: 

reading the received integrity code from the transportable state structure; 
5 calculating a calculated integrity code from the state information included in the transportable state structure; 

and 

comparing the received integrity code with the calculated integrity code to determine whether the transportable 
state structure is valid. 

10 5. The method of any of claims 1 to 4, in particular claim 1 further comprising: 

initializing a property of the server-side control object to have an initial state; 

setting an indication to represent that the state of the property of the server-side control object is unchanged 
from the initial state; and 

is changing the indication to represent that the property of the server-side control object has changed from the 

initial state, if the property was loaded with the state value from the transportable state structure. 

6. The method of any of claims 1 to 5, in particular claim 5 further comprising: 

setting the indication to indicate that the property of the server-side control object is unchanged from the 
20 initial state, if the property is data bound to a field of a server-side datastore. 

7. The method of any of claims 1 to 6, in particular claim 5 further comprising: 

traversing each server-side control object in the control object hierarchy; and 
25 storing the state information of the server-side control object into the transportable state structure for trans- 

mission back to the client, if the indication represents that the state information of the server-side control object 
has changed from its initial state. 

8. The method of any of claims 1 to 7, in particular claim 7 further comprising: 

30 transmitting the transportable state structure to the client in a response with authoring language data defining 

the web page. 

9. The method of any of claims 1 to 8, in particular claim 7 further comprising: 

35 calculating an integrity code from the state information include in the transportable state structure, responsive 

to the operation of storing the state information; 
storing the integrity code in the transportable state structure; and 

transmitting the transportable state structure to the client in a response with authoring language data defining 
the web page. 

40 

10. The method of any of claims 1 to 9, in particular claim 1 further comprising: 

generating authoring language code defining at least a portion of the web page from the at least one server- 
side control object in the control object hierarchy. 

45 11. The web page defined by the authoring language code and being interpretable by a browser executing on a client 
computer system coupled to a web server, the authoring language code being substantially generated at the web 
server by the method of claim 10, wherein the authoring language code includes the transportable state structure 
storing state information for at least one server-side control object in the control object hierarchy. 

50 12. A computer program storage medium readable by a computer system and encoding a computer program for ex- 
ecuting a computer process managing a state of a server-side control object corresponding to a client-side user 
interface element incorporated in a web page displayed on a client, the computer process comprising: 

creating the server-side control object in the control object hierarchy to process the client-side user interface 
55 element; 

receiving from the client a transportable state structure including state information indicating a state value for 
at least one server-side control object in the control object hierarchy, 
extracting the state information from the transportable state structure; and 
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loading the state value from the state information into property of the server-side control object, if the state 
value is associated with the server-side control object. 

13. A computer data signal embodied in a carrier wave by a computing system and encoding a computer program for 
5 executing a computer process managing a state of a server-side control object corresponding to a client-side user 

interface element incorporated in a web page displayed on a client, the computer process comprising: 

creating the server-side control object in the control object hierarchy to process the client-side user interface 
element; 

receiving from the client a transportable state structure including state information indicating a state value for 
at least one server-side control object in the control object hierarchy, 
extracting the state information from the transportable state structure; and 

loading the state value from the state information into property of the server-side control object, if the state 
value is associated with the server-side control object. 

1 4. A computer program product encoding a computer program for executing in a computer system a computer process 
for managing a state of a plurality of server-side control objects created in a control object hierarchy and corre- 
sponding to a plurality of client-side user interface elements incorporated in a web page displayed on a client, the 
computer process comprising: 

receiving from the client a transportable state structure including state information associated with one or more 
server-side control objects in the control object hierarchy; 

deserializing the state information to extract a state value, an associated property data type, and hierarchical 
information for a property of a server-side control object; 

locating the server-side control object within the control object hierarchy based on the hierarchical information; 
and 

loading the state value into the property of the server-side control object. 

15. The computer program product of claim 14 wherein the computer process further comprises: 

30 converting the state value have the associated property data type prior to the loading operation. 

16. The computer program product of claim 14 or 15, in particular claim 14 wherein the computer process further 
comprises: 

initializing the property of the server-side control object to have an initial state; 

setting an indication to represent that the property of the server-side control object is unchanged from the 
initial state; and 

changing the indication to represent that the property of the server-side control object has changed from the 
initial state, if the property was loaded with the state value from the transportable state structure. 

17. The computer program product of any of claims 14 to 16, in particular claim 15 wherein the loading operation 
comprises traversing one or more of the server-side control objects in the control object hierarchy, and for each 
server-side control objects, the loading operation further comprises: 

45 extracting a property value from the server-side control object associated with the indication representing that 

the state of the server-side control object has changed from its initial state; and 

serializing the property value into the transportable state structure with the property values from other server- 
side control objects in the control object hierarchy for transmission back to the client. 

so 18, The computer program product of any of claims 14 to 17, in particular claim 16 wherein the loading operation 
further comprises: 

extracting a property data type from the server-side control object associated with the property value; and 
serializing the property data type into the transportable state structure with the property value of the server- 
55 side control object for transmission back to the client. 

19. The computer program product of any of claims 14 to 18, in particular claim 16 wherein the loading operation 
further comprises: 
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storing into the transportable state structure hierarchical information relating to the server-side control object 
in the control object hierarchy for transmission to the client. 

20. The computer program product of any of claims 14 to 19, in particular claim 17 wherein the computer process 
5 further comprises: 

transmitting the transportable state structure to the client in a response with authoring language data defining 
a web page. 

21. The computer program product of any of claims 14 to 20, in particular claim 17 wherein the computer process 
10 further comprises: 

calculating an integrity code from the state information stored in the transportable state structure, responsive 
to the serializing operation; 

storing the integrity code in the transportable state structure; and 
15 transmitting the transportable state structure to the client in a response with authoring language data defining 

a web page. 

22. The computer program product of any of claims 14 to 21, in particular claim 14 wherein the transportable state 
structure further includes a received integrity code, and further comprising: 

20 

reading the received integrity code from the transportable state structure; 

calculating a calculated integrity code from the state information include in the transportable state structure; and 
comparing the received integrity code with the calculated integrity code to determine if the transportable state 
structure is valid. 

25 

23. A handler system executed in a server computer for processing a request including a transportable state structure 
storing a state value and a data type from a client computer, the handler system comprising: 

a hierarchy of server-side control objects created by the handler and associated with client-side user interface 
30 elements, at least one of the server-side control objects including a property; 

a loader module storing the state value received in the transportable state structure into the property of the 
server-side control object, based on the data type; and 

a saver module storing the property and the data type into a transportable state structure. 

35 24. The handler system of claim 23 further comprising: 

a reader module extracting the state value, associated hierarchical information, and the data type from trans- 
portable state structure; and 

a traversal module locating the control object within the control object hierarchy, based on the associated 
40 hierarchical information. 
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HTML Encyclopaedia 

The form tag 

The HTML element 

<form ...> . ... </form> 

defines a form for interactive input via the CGI mechanism. Within the <form> ... </form> tags 
there will be number of input elements for interactive input. This collection of elements constitutes 
a form. 

Once the various boxes within the form have been filled and the "submit" button has been hit the 
user entered values are transmitted to the server where a CGI back end can process the 
information and generate whatever reply is required. 

A <form> tag has three significant attributes, method, action and enctype. 

1. method 

For simple use the method attribute can be set to either get or post. This attribute controls 
the method by which the user entered data is communicated to the back end program. 

o If the get method is selected then all the data is presented to the backend program in 

the environment variable QUERY_STRING. 
o If the put method is selected then all the data is presented to the backend program on 

its standard input. 

Many authors suggest that the put method is preferable but the only reasons for selecting it 
in preference to get are 

o If your host system (the one the backend runs on) restricts the size of an environment 
variable. This may well be a problem under MSDOS but is unlikely to cause any trouble 
if you are using Unix. 

o If you are concerned that the WWW server maintains a publically accessible log of 
requests, get requests can be inferred from such a log, put requests cannot. 

2. action 

The value of the action attribute specifies what is to be done when the form-filling is 
complete. Its value will be simply a URL, if this is the name of an executable file then the file 
will be executed, however it may simply refer to a WWW page, however this is unusual. 

Here is an example 

<form METHOD="GET" ACnON = H http://www.scit.wlv.ac.uk/cgi-bin/test"> 

3. enctype 

This determines the method used to encode the form's contents. It defaults to applicat/on/x- 
www'form-urlencoded. It need not be quoted unless you are using the <input> tag with the 
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type attribute set to We when the value should be set to multipart/form-data 


See also <input>, <select>, <textarea> and CGI notes 
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